This website uses Cookies. By clicking Accept, you agree to the storing of cookies on your device to enhance your community and translation experience. Read our Privacy Policy.
Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
Buy or Renew
Buy or Renew
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.
About General Topics
Post a discussion here if you have general questions regarding configuration and troubleshooting for Palo Alto Networks products. Use this forum to collaborate with like-minded security professionals to improve your security posture.

Discussions

Start a conversation

Resolved! Panorama > Policies > Security > Post Rules > Zone field has a red background

Hi thereWhy does the zone in the screenshot appear with a red background?It is the same when browsing direct to the FW itself.There is an interface in the zone with a subinterface.Both main and subint are up.IP address configured on the subintThe interface which is a member of the zone is shown below:Any replies much appreciated

2021-03-24 15h15m53 Zone Red backgroud.png
2021-03-24 15h20m21-StdF Interface setup.png

Resolved! March Madness 2021

Have any new application signatures been released for March Madness 2021? I'm able to find the historical ones but have not seen any for 2021 yet.

bmeyer by • L0 Member
  • 3675 Views
  • 2 replies
  • 2 Likes

Resolved! Meraki to PAN Conversion?

Does anyone have any thoughts on doing an export/conversion from Meraki to PAN? There doesn't seem to be a direct conversion process so any help would be appreciated, I'd rather not completely build out the PAN if I don't have to.

Resolved! SSL Decryption Question PANOS9

Hi, i have one short question about PANOS 9 and 10 ssl decryption.We use ssl decryption on all PAs for many years.Is the rule 77 obsolet after upgrade to PANOS 9 /10??The rule was a must have for ssl decryption working on PANOS 7. Best regards,Chris

HW-ChrisME_1-1616593171357.png

Resolved! FW routing packets to internet vs internal

I have a weird issue with a LAB interface/zone that when packets to a cloud IP that is reachable via the core it routes it to the internet vs the core. All other traffic is routed correctly but not this and I can't seem to figure out why. 10.100.2.1 is my core, 10.100.99.1 is the lab interface on the PAN which is part of VR1 (only virtual rou...

drewdown by • L4 Transporter
  • 2449 Views
  • 1 replies
  • 0 Likes

Revert Pan local interface object back to Panorama

Hi All, I follow this KB by remove static route to particular interface from virtual router but https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLIxCAO I face another issue is the set vsys vsys3import network interface [ ae3.1111 ae3.1112 ae3.1113 ] example I tried to delete vsys vsys3import network interface ae3.1111,...

Kiizai by • L0 Member
  • 2232 Views
  • 1 replies
  • 0 Likes

PAN-GPS POWER SHELL

Hello,I have the below query, can someone explain this.While reviewing PowerShell command execution we encountered a scenario where PANGPS.exe file in the program files Palo alto installation folder was generating PowerShell commands. i want to understand the purpose of the execution of the PowerShell command along with the validity. Also we wan...

Resolved! Compatibility SFP for PA-5250

Hello,Can you help me? I have an Avago AFBR-709SMZ SFP, in the documentation it says that it has withdrawn from the AVL. So, can I use them and it would not have problems in their operation? https://live.paloaltonetworks.com/t5/operations-documentation/updated-on-02-09-2021-document-810-000096-00s-ref-transceiver/ta-p/227987?attachment-id=9477

Resolved! Subscribe to Newsletter and CIRT

Hello All, Hope you are all well and safe. I'm looking for a way to register to the PA Newsletter and CIRT Notifcations as to be aware of any security threat or a CVE related to PA Devices as to keep my customers devices up-to-date, and their network secure. Can someone guide me on how to do this?

Unable to block https from untrust zone

Hi guys, I have a query were im not able to block https traffic for a specific domains subdomain to be blocked. Where i have created a url catagory and mapped it with url filtering and called that in a security policy.But as i see that the http is getting blocked as a descriptive value as threat and the https is getting allowed for the same set ...

Autofocus and minemeld

Hello, I don't understand what the Autofocus service is doing. What is the goal ? It provides the list of attacks present in a corporate network? How do you connect the firewall and the Autofocus service? I also do not understand what the Minemeld service is doing? It provides the indicators, for example: the number of attacks suffered by a c...

Sarou22 by • L2 Linker
  • 2282 Views
  • 1 replies
  • 0 Likes

Minemeld

Hello, I don't really understand the notion of minors with Minemeld. Can you explain this diagram to me please? THANK YOU

Sarou22 by • L2 Linker
  • 2131 Views
  • 1 replies
  • 0 Likes

High Availability

The Palo Alto instructions to set up High Availability are fairly straightforward, but the devices upstream and downstream barely get a mention. In our case, downstream we have two Cisco switches and multiple VMs attached. Upstream are two Cisco switches to a larger network.We are considering link-state tracking on the Cisco switches to create t...

jmck9999 by • L1 Bithead
  • 4716 Views
  • 4 replies
  • 0 Likes

EDL object not showing up on dropdown list in policy rule

Hi,PAN version 9.1.0, no Panorama.I created two EDL - one of type IP List and one of type Domain List.Both EDL point to an internal webserver which holds the lists.Both EDL pass the "Test Source URL" check. The IP list works fine, we put it an a policy rule and it blocks as excpected.I tried to create a rule with the Domain list but it doesn't e...

  • 24416 Posts
  • 125 Subscriptions
Top Solution Authors
View All
Labels
LEGAL NOTICES
RESOURCES
Khoros awards 2022
Copyright 2007 - 2026 - Palo Alto Networks